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REMARKS 

The Exammer has rejected Claims 1-27 under 35 U.S,C. 1 12, second paragraph, as being 
indefinite for failing to point out and distinctly claim the subject matter which applicant regards 
as the invention. Specifically, tihe Examiner argues 'that the tenn "more thorough" in Claims 1, 
9, and 17 is a relative term.' In response, applicant respectfully asserts that the followmg claim 
language is to be read according to the plain and otdinaiy meaning thereof, in view of relevant 
dictionary definitions (see defimtian(s) presented in Amendment B filed 05/15/06), etc. 

The Examiner has also noted that the terms '*the computer system" and *fhe user" in 
Claim 28 lack sufficient antecedoDit basis. Jn response, applicant directs the Examiner's attention 
to applicant's Claim 1, from which Claim 28 depends, which claims 'S^cn an associated 
computer system is at least substantially idle" and "bciag accessed by a user" (en5)hasis added). 
Additionally, the Examiner argues that "[t]he term 'least substantially' in claim 1, 9, and 17 is a 
relative term," Applicant respectfblly asserts that the claimed "at least substantially" in all of the 
pertinent claims is to be read with regards to its plain and ordinary meaning, as evidenced by 
dictionary definitions, etc. For example, one dictionary definition of "substantial" includes 
"Considerable in importance, value, degree, amoimt, or extent* • (Ihe American Heritage® 
Dictionary of the English Language, Fourth Edition). 

The Examiner has rejected Claims 1, 8, 9, 16, 17, 24, and 27-28 under 35 U.S.C 103(a) 
as being unpatentable over Cozza (U.S. Patent No. 5,502,815), in view of Chess et al. (U.S. 
Patent No. 6,772,346), in view of Hiuska (Virus Detection), and in further view of EUcnbcrger 
(U.S. Patent No. 5,684,875). Applicant respectfully disagrees with such rejection. 

With respect to the independent claims, the Examiner has reUed on item 58 "no" and item 
62 in Figure 4 of Cozza to make a prior art showing of applicant's claimed technique where "if no 
computer files containing mahvare are found in said storage location, then identifying said 
storage location as a clean storage location" (see this or similar, but not necessarily identical 
language in the independent claims). Applicant respectfully asserts that the cache file technique 
disclosed by Cozza in Figure 4 simply does not meet applicant's clainaed "clean storage area." 
Wifli reference to Figure 4, Cozza teaches that "[ijf no viruses were found in flje file, then the 
file's scan information is added to the new cache in step 62" (Cozza, Col. 5, lines 1-3). In this 
excerpt, Cozza describes a method of updating a cache file if thare are not any viruses found in 



PAGE 7/11'RCVDAT11/27/20066:30:19PM [Eastern Standi 



NOV. 27. 2006 3:43PM 



ZILKA-KOTAB. PC 

-2- 



NO: 4902 P. 8 



the file. If all files were virus free, for example, the cache would contain information on cveiy 
file. However, having a complete file cache does not imply that flie entire cache represents "a 
clean storage location," as claimed by applicant Iti particular, the file cache, as disclosed by 
Co22a, operates on individual files whereas applicant claims "clean storage locations" (enq)hasis 
added), as claimed by apphctot. 

the Office Action mailed 07/27/2006, the Examiner has fiailed to respond to applicant's 
arguments with respect to applicant's claimed technique where 'If no computer fdes containing 
malware are found in said storage location, flicn identifying said storage location as a clean storage 
location." Thus, a notice of allowance or specific prior art showing of each of the foregoing claim 
elements, in combination with the remaining claimed features, is respectfully requested. 

In addition, with respect to the independent claims, the Examiner has relied on item 40 in 
Figure 4 of Cozza to make a prior ait showing of applicant's claimed technique of . . 
subsequently reading a computer file, [and] detmnfaiing whether or not said computer file is 
stored wifliin a clean storage location (see the same or similar, but not necessarily identical 
language in the indqjendent claims - emphasis added), Apphcant*s arguments made on page 10, 
second paragraph of Amendment B mailed 05/15/2006 arc hereby moorporated by reference. 

In the Office Action mailed 07/27/2006, flie Examiner has argued that Cozza 'Reaches a 
system and method that relates to storing initial state information concerning the file or volume 
which is being examined for a vims" and that *'[t]his information is stored in a cache in a non- 
volatile storage medium and when files are subsequently scanned for viruses, the current state 
information is compared to the initial state information stored in the cache." Further, the 
Examiner has argued that "[i}f the initial state information diflfers fix)m the current state 
information then the file or volume is scanned for viruses which change the state information of 
the file or volume/' and "[i]f the initial state information and current state mformation is the same 
then the file or volume is scanned for a subset of viruses which do not change the state 
information." 

Applicant respectfiilly disagrees with the Examiner's arguments. Specifically, applicaat 
respectfidly points out that Cozza teaches that ' Hnitial state iTifnmiAtiQn concemmg the f^SM 
volume which is beii^ examined for a virus" is "stored in a cache in a non-volatile storage 
medium"* (Abstract - emphasis added) and feat "[f]or each file on a volume that is to be scanned, 
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the cache is searched for the presence of the file's cache infomation in step 40" (Col. 4, lines 1 8- 
20 - emphasis added). However, merely scaimine files in a volume by searching a cache which 
contains initial stat^ iTifiirmation does not disclose "detennining wheflier or not said computer fils 
is stored within a clean storape location " (emphasis added), as claimed by applicant. Clearly, 
storing initial state ttifnrmatirtn for a file or volume in a cache fails to suggest that the "computer 
file is stored within a clean storage location, '' (emphasis added), in the manner as claimed by 
applicant 

Further, with respect to the independent claims, the Examiner has relied on items 320, 
and 330 in Figure 3 of Chess to make a prior art showing of supplicant's claimed technique where 
"if said computer file is not stored within a clean storage location, then malware scanning said 
computer file'' (see the same or similar, bat not necessarily identical language in the independent 
claims). Applicant's arguments made on page 1 1, second paragraph of Amendment B mailed 
05/15/2006- 

In the Office Action mailed 07/27/2006, the Examiner has argued that Xhess clearly 
teaches a specific scanning method as shown in Fig. 3," that "Chess teaches data fork scanning,'* 
and that "Chess et al. teach[esl a particular scanning method, which provides 'rigorous 
analysis...'" as shown in Col. 6, lines 45-55. Applicant respectfiilly disagrees and asserts fiat the 
excerpts in Chess relied on by the Examiner merely teach that a "file is subjected. . . to rigorous 
analysis" (Col. 6, lines 45-46) and "is determined- . . to be either non-malicious. . . or to contain a 
new and now-known maHcious-code entity" (Col. 6, lines 57-60), However, performing analysis 
on a file in order to determine if it is malicious, as in Chess, docs not teach a technique with a 
specific condition where "if said computer file is aej stored within a clean storage location, then 
malware scanning said computer file'' (emphasis added), as claimed by applicant. 

Additionally, applicant notes that the Examiner has also relied on Fig. 4, items 40 "no*' -> 
42 -> 44 of Cozza to make a prior art showing of applicant's above claimed technique. Applicant 
respectfiilly asserts that the excerpts- relied upon by the Examiner merely teach that "[f|or each 
gle on a volume that is to be scanned, the cache is searched for the presence of the file's cache 
information in step 40** (Col. 4, lines 18-20 - emphasis added) and that "[i]f the file's itiformation 
is not found . . . lixen it is scanned for a full complement of vhuses, including those that infect the 
file resource fork in step 42 and those that infect the data fork in step 44'' (Col. 4, lines 24-28 - 
en^hasis added). AppUcant respectfiilly notes that scanning a file for viruses if the file's 
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infomiation is not found in the cache does not teach a technique where "if said con5)Uter file is 
not stored within a clean storage location, then malwaxe scanning said computer file" (emphasis 
added), as claimed by applicant. Clcariy, not finding a file's c^he infoimation in a fails to 
meet applicant's claimed "file is not stored within a clean storage location," in the manner as 
claimed by applicant 

Still yet, with respect to the independent claims, the Examiner has relied upon the 
BUenberger reference to make a prior art showing of applicant*s claimed technique "wherein said 
step of malware scanning all coraputM: files stored within a storage location as a background task 
is performed with more thorough scanning options selected than for on-access scanning applied 
to computer files not stored within clean storage locations and being accessed by a user" (see the 
same or similar, but not necessarily identical language in the independent claims). 

Applicant respectfully asserts that flie EUenberger reference merely teaches a method of 
randomly selecting a mix of fast execution and slow execution virus detection algorithms for each 
scan (Col 5, Imes 25-29). EllKiberger docs not teach £^}plicant's claimed technique "wherein said 
step of malware scannmg all computer files stored within a storage location as a background task 
is performed with more thorough scanning options selected thaii for on-access scanning applied 
to conq)uter files not stored within clean storage locations and being accessed by a user" 
(emphasis added), as claimed by applicant. EllenbCTger simply docs not even menticm using 
different scanning options for background task scanning versus on-access scanning, as claimed. 

hi the Office Action mailed 07/27/2006, the Examiner has argued tibiat "EUenberger 
teaches a virus scanning method where one or more virus detection algoritfnns are selected at 
random for each scan." Applicant respectfully disagrees with the Examiner's argument and again 
respectfully points out that this random selection of virus detection algorithms does not teach 
applicant's claimed technique "wherein said step of malware scanning all conq)uter files stored 
within a storage location as a background task is performed with more thorough scanning options 
selected than for on-access scanning applied to computer files not stored within clean storage 
locations and being accessed by a us^* (emphasis added), as claimed by applicant Clearly, a 
random selection, as disclosed by Ellenberger, feils to suggest that "ahackaroundtask is 
performed with more ftiorough scanninft options" (emphasis addedX in the manner as claimed by 
applicant 
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Additionally, with respect to the independent claims, the Examinar has relied on page 
129, Col. 2 of Hniska to make a prior art showing of applicant's claimed technique "wherein said 
malware scanning of all conq^uter files stored within a storage location is peifoimed as a 
bacl^groijnd task that occurs as a function of when an associated conq)uter system is at least 
substantially idle" (see this or shnilar, but not necessarily identical language in the independent 
claims). Applicant's argumeftts made on page 13, fourth paragraph of Amendment B mailed 
05/1S/2006 are hereby incorporated by reference. 

M the OjBBce Action mailed 07/27/2006, the Examiner has simply reitmted that 'on- 
access scamling 'intercepts file open and file close qpcrations" . . . hence making it as a 
baclcground task.* Applicant respectfully disagrees and again asserts Hruska discloses that "iQlik 
access scanning involves interoenting i ile open zrAfile close operations*, virus checking the file 
and allowing the file access or execution" (pa^e 129, Col. 2 - en^hasis added), which fails to 
teach a technique "wherein said malware scanning of all computer files stored within a storage 
location is performed as a background task that occm-s as a function of w hen an associated 
computer system Is at least sabstantiallv idle " {emphasis added), as claimed by applicant. 
Clearly, mtercepting file open and close opeirations during a file open or execution fails to suggest 
that an ^'associated computer system is at least substantially idle" (emphasis added), in the 
maimer as claimed by applicant 
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